Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131392e34322e3232342e302f31392d3234203d3e203337393633.roa
File:                     3131392e34322e3232342e302f31392d3234203d3e203337393633.roa (raw, json)
Hash identifier:          pT0hDyH/zxwSjEnZ+i5rzSaXvj++7CGl/ttNR0PKCJA=
Subject key identifier:   71:A5:57:7F:93:12:A3:44:E8:00:3F:0F:B6:BA:3E:6F:4A:62:C4:45
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       1C25C80A7AC75CD93CEE7F0C8ECDAC6D1FCA9BF3
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131392e34322e3232342e302f31392d3234203d3e203337393633.roa
Signing time:             Wed 25 Mar 2026 16:02:56 +0000
ROA not before:           Wed 25 Mar 2026 15:57:56 +0000
ROA not after:            Wed 24 Mar 2027 16:02:56 +0000
asID:                     37963
IP address blocks:        119.42.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 09:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:c8:0a:7a:c7:5c:d9:3c:ee:7f:0c:8e:cd:ac:6d:1f:ca:9b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Mar 25 15:57:56 2026 GMT
            Not After : Mar 24 16:02:56 2027 GMT
        Subject: CN=71A5577F9312A344E8003F0FB6BA3E6F4A62C445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:63:d4:23:77:0f:b7:72:fb:af:57:06:48:
                    8a:e3:5a:97:c2:91:bd:60:9f:c3:06:f2:c4:6f:ad:
                    01:a4:8e:47:30:f4:68:2e:23:f0:e6:e8:0d:d6:88:
                    c7:92:52:88:0e:75:ae:bf:a8:e0:26:5c:e7:ce:64:
                    79:b3:7a:bd:9b:e1:dc:d1:6c:b2:cc:b7:d3:9e:c1:
                    a9:57:d8:47:f2:5e:d2:18:d0:22:64:f4:17:47:0e:
                    75:7b:b9:57:5a:ba:15:f2:db:2d:7a:04:46:d0:32:
                    da:04:40:63:9f:1b:7d:46:58:3e:d1:ff:62:77:58:
                    2b:a2:fe:b8:1d:29:ad:c9:ea:7e:e4:36:d5:42:36:
                    0e:7a:4e:e7:3e:2c:2c:bc:ea:71:0a:cd:98:e4:cf:
                    6c:63:3a:ba:dc:e6:46:11:32:df:41:84:a7:0a:c7:
                    fb:f3:0d:03:c0:ac:c5:da:0c:7d:a4:66:01:cb:f9:
                    d3:6b:6b:ad:e9:7d:47:50:e2:a8:61:44:da:85:18:
                    f0:00:6a:db:56:c1:fe:ff:5b:8d:9c:cb:d4:ba:b7:
                    e7:0d:fb:03:f1:62:4c:a3:b6:4e:60:d0:b8:b9:af:
                    ba:3d:15:6f:a1:2d:84:ce:93:c3:66:03:e9:f8:e6:
                    90:a5:d8:8a:df:53:17:5d:29:04:e4:2d:8d:d7:bc:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:57:7F:93:12:A3:44:E8:00:3F:0F:B6:BA:3E:6F:4A:62:C4:45
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131392e34322e3232342e302f31392d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.42.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:35:fb:d1:91:30:36:4c:12:74:7a:2f:df:39:4a:90:22:56:
         23:63:94:04:a3:9a:c8:e2:3a:96:28:ff:54:ad:5d:86:7b:03:
         8a:96:b0:8c:d9:c9:65:75:62:20:fb:78:7c:c4:2f:bb:46:2c:
         93:f2:ce:7e:84:f8:0d:c6:54:7c:bd:e7:f4:59:fc:4a:d6:1e:
         77:f3:aa:61:3e:06:8b:df:40:d8:ca:bd:ad:ea:ff:f9:e3:25:
         29:6c:e7:4f:0a:d9:64:5d:05:7e:00:a6:03:3b:11:6e:07:d5:
         62:26:da:05:16:7f:72:95:b3:7d:33:da:a4:72:f0:72:41:75:
         2e:d7:3b:57:5c:2f:e8:e9:9d:cb:a1:d0:15:92:b5:0c:a9:6a:
         da:36:9c:04:8f:10:61:6e:49:9a:4f:39:bb:96:10:bb:ca:ec:
         6b:51:b1:37:9a:97:22:90:80:6c:b4:ab:20:8a:a2:a9:8b:a5:
         5e:6f:72:94:6b:8c:26:d3:82:e8:90:32:15:0f:5a:a6:50:74:
         69:a9:43:d4:34:a5:b3:37:19:0b:17:12:8b:30:c0:ec:75:57:
         b9:ba:46:7c:ad:9d:36:f8:00:4b:2b:dc:8d:17:c8:36:e9:e4:
         9c:2f:15:0c:52:b4:72:41:46:bd:c3:da:3b:66:c9:cf:dc:dc:
         4d:ef:34:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:20:24 2026 by rpki-client